1. Scope and summary
This Privacy Policy applies to the Android app schukai Time Tracking, package ID com.schukai.zeit. The app records a person's own working time, breaks, corrections, and absences and produces views, exports, and signed reports.
In local mode, app data remain on the device. The app contains no advertising, analytics, tracking, or crash-reporting SDK. Work-time data are exchanged only when the user deliberately configures a connection to the employer's Nucleus system.
Document version 1.0.0 · Effective: 3 November 2026
2. Controller and privacy contact
schukai
Eichenstraße 26
82290 Landsberied
Germany
Email: hey@schukai.com
Further provider details are available in the legal notice. The employer is generally responsible for data held in its Nucleus system, and the employer's privacy notice also applies.
3. Data in local operation
Depending on use, the app processes start and end times, breaks, corrections and their reasons, absences, target hours, balances, holiday region, leave entitlement, settings, and the trial and full-version state.
These data are held in the private app database. Private report keys and the recovery code for encrypted backups are protected through the Android key store. Android system backup is disabled for the app.
In local mode, schukai operates no server for these data and receives neither work-time nor absence data. The app collects no advertising ID, Android ID, IMEI, contacts, or location data.
4. Optional Nucleus connection
An employee can deliberately connect the app to the employer's Nucleus system by QR code. The app then sends bookings, corrections, leave requests, and a device name consisting of the product name and device model to that server over encrypted HTTPS. It retrieves information including target hours, balance, holidays, and absences.
The session is protected on the device through the Android key store. A read cache needed for offline display is also stored in encrypted form. Disconnecting removes the session and Nucleus cache from the device.
The employer determines the purpose, legal basis, recipients, and retention of employee data processed in its Nucleus system. Requests concerning access, correction, or deletion of those server data must be addressed to the employer. Disconnecting the app does not delete data on the employer's server.
5. Google Play and the full version
After the trial, the local full version can be purchased once through Google Play. Google processes information including Google Account, payment, transaction, device, and technical billing data under its own terms. schukai receives no card, bank, or other payment-method details.
To display the offer and handle purchase, acknowledgement, and restoration, the app exchanges the product identifier, localized price, purchase state, purchase token, and acknowledgement state with Google Play. The app stores the resulting entitlement state locally. It does not send the purchase token to a schukai server.
See the Google Privacy Policy for information about Google's processing.
6. Permissions and technical functions
The camera is used only after Android permission is granted to scan a Nucleus pairing code. Camera images are neither stored nor transferred, and the pairing link can be pasted instead.
Internet access is used only for Nucleus and Google Play Billing. Notifications, quick access, and restart handling support active time recording and reminders. The app does not use these functions for advertising or user analytics.
On first launch, the app evaluates the mobile-network country, SIM country, time zone, and language region without an additional permission to suggest a country. These signals remain on the device and are not stored.
7. Exports, reports, and backups
CSV and PDF exports, signed work-time reports, and backup files are created only on explicit request and saved to a user-selected location or handed to a selected app. From that point, the user controls their retention and further disclosure.
Backups are encrypted with a recovery code and signed with the device key. Without the code, schukai cannot open or restore the backup. Reports contain the work-time data required for the selected period and technical verification information.
8. Retention and deletion
Local data remain until the user selects “Delete all data”, clears app storage through Android, or uninstalls the app. Externally stored exports and backups must be deleted separately at their storage location.
Before deletion, the app notes that statutory or contractual retention duties may apply to work-time records. Data in the Nucleus system are managed under the employer's rules and are not removed by the local deletion function. Purchase and payment data held by Google are managed through Google's controls.
9. Rights, security, and requests
Depending on applicable law, rights may include access, correction, deletion, restriction, portability, objection, and the right to complain to a supervisory authority.
Because schukai receives no work-time or absence data in local mode, schukai cannot identify or provide such local data. Privacy questions about the app can be sent to hey@schukai.com. The employer is the contact for Nucleus data, and Google is the contact for Google Play data.
schukai Time Tracking is offered exclusively to adults and is not directed specifically at children.
10. Changes
We update this policy if the app's functions, permissions, integrated services, retention, or data processing change. The effective date above identifies the current version.
Further privacy rights and material changes
schukai does not sell personal data.
The data processing and contact channels described in this notice also apply when the app is used outside Germany. Mandatory rights under applicable privacy law remain available and are not limited to the GDPR rights expressly mentioned here. Depending on the applicable law and its conditions, these may include confirmation of processing, access, correction, deletion, anonymisation or blocking of data processed unlawfully or no longer needed, data portability, objection and withdrawal of consent. Requests concerning data processed by schukai can be sent to hey@schukai.com. You may also complain to a competent data protection authority.
Where the Brazilian LGPD applies to the processing, its rights remain available, including confirmation and access, correction, anonymisation, blocking or deletion of unnecessary, excessive or unlawfully processed data, statutory data portability, information about recipients and about the possibility and consequences of refusing consent, withdrawal of consent and consent-related deletion. Statutory exceptions and retention duties continue to apply. Requests can be submitted through the privacy contact above; the right to complain to the ANPD remains unaffected.
If the processing described here changes materially, we will expressly inform affected users about the change, when it starts, its consequences and the relevant rights. For changes to an app function, a prominent in-app notice will be provided before the affected processing starts. Where a service or support change also affects older app versions, we will additionally ensure suitable direct notice through an existing contact or service channel that may lawfully be used, in good time before the change starts. Quietly changing a website or merely publishing an update is insufficient for this purpose. Where consent is required, it will be obtained before the processing that depends on it. A privacy notice does not constitute agreement to a contractual amendment.